Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
File:                     3136382e3232372e37362e302f32322d3234203d3e203532393430.roa (raw, json)
Hash identifier:          6wK3ddSaNtrPHYPMCnN3+j/PIyN4FkxNJCtOt+ur37M=
Subject key identifier:   72:59:D6:01:1B:AB:74:5E:2A:65:0C:3E:13:E6:3D:49:37:35:35:88
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       50AD89C81DB73A73E50B7F3FD4D1840CDBEC69D2
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa
Signing time:             Tue 23 Jul 2024 12:02:28 +0000
ROA not before:           Tue 23 Jul 2024 11:57:28 +0000
ROA not after:            Tue 22 Jul 2025 12:02:28 +0000
asID:                     52940
IP address blocks:        168.227.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ad:89:c8:1d:b7:3a:73:e5:0b:7f:3f:d4:d1:84:0c:db:ec:69:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:28 2024 GMT
            Not After : Jul 22 12:02:28 2025 GMT
        Subject: CN=7259D6011BAB745E2A650C3E13E63D4937353588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fd:60:16:c2:46:68:21:ba:19:62:94:0b:0e:
                    a6:e0:b0:cc:35:47:57:99:b3:ec:99:0a:6a:b3:65:
                    17:88:3e:d0:59:6a:25:0a:3f:8a:88:4d:57:d0:95:
                    fd:62:be:93:c2:10:2c:49:e6:3a:20:61:92:59:ad:
                    5d:c4:02:6d:cc:b1:87:75:18:75:2a:0e:9f:da:93:
                    7d:a6:15:82:e2:9c:67:5c:33:f7:fd:34:19:32:3e:
                    6f:db:ce:cb:3e:a4:51:d9:d1:88:ce:eb:72:38:95:
                    f6:c6:da:6b:3d:66:a5:14:da:8b:8e:98:e4:26:c4:
                    39:47:74:8b:ea:81:7a:8d:b7:58:e2:79:63:84:01:
                    09:ec:a3:67:aa:24:d0:84:e8:46:2c:ae:44:23:64:
                    20:c6:68:fd:24:82:90:c8:04:af:67:ff:1a:a1:0a:
                    13:cf:28:37:83:a0:af:96:23:35:f6:b7:9f:82:b1:
                    62:1a:9e:58:21:0a:8c:e3:e4:73:7b:21:d2:3a:e5:
                    8b:16:9e:b9:4d:43:12:69:83:27:3d:46:b4:a5:07:
                    47:a1:68:de:43:fb:91:c0:c5:d0:99:fe:13:35:c9:
                    bc:7e:9f:da:d9:f7:4e:44:d7:56:5b:69:8d:7b:aa:
                    47:01:0f:c0:fb:37:28:7b:22:9f:6a:4f:4e:65:d2:
                    07:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:D6:01:1B:AB:74:5E:2A:65:0C:3E:13:E6:3D:49:37:35:35:88
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3136382e3232372e37362e302f32322d3234203d3e203532393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:c8:92:5a:05:e2:9e:7c:42:f1:ef:74:b6:cb:87:97:fc:da:
         19:40:92:e9:49:fc:36:3c:ca:26:fd:b3:c5:dd:a0:b9:11:39:
         d3:c0:d3:b2:44:6b:a6:9f:28:fc:5e:67:0e:46:7b:32:40:5b:
         9b:1a:bf:ff:c2:6f:5b:c4:7c:02:9e:b6:a9:ce:51:2e:c9:10:
         6d:ca:58:73:9a:45:74:98:80:ac:68:fc:7c:e1:1b:98:87:99:
         3a:a5:a3:99:62:2f:3a:2d:39:97:4f:e7:71:38:17:96:62:26:
         44:48:f2:3b:c0:5d:c2:2e:58:dc:3b:b7:00:e1:b5:ac:a7:40:
         6b:e3:b0:14:d9:5b:31:ee:46:54:6f:eb:2a:9e:1f:a7:5e:ec:
         9a:d8:a5:2c:34:af:b7:dc:58:41:c8:a4:55:24:9e:9a:c4:66:
         9a:a7:a9:53:6d:ef:c2:5d:c6:31:b4:87:36:3b:99:fd:81:b6:
         64:37:94:7b:9a:bf:db:70:91:c2:54:ce:9c:77:54:46:4d:b7:
         16:45:6b:67:5f:11:b6:70:7e:a7:1e:ca:ff:7e:bb:d7:bd:f0:
         5b:f6:3b:71:9a:c4:cd:b8:b1:9c:87:13:5a:a7:ca:56:7e:dc:
         da:37:28:d6:c4:a2:b3:a1:7f:c3:ea:25:38:d0:c1:15:fe:ab:
         f8:82:d2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org